This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211439.roa
File:                     AS211439.roa (raw, json)
Hash identifier:          U+sJXx5Z9buKeTVlKVjtRfDgZE/dVaF/9rmUFKmoNIU=
Subject key identifier:   C7:C3:12:F9:9D:9C:F3:1B:55:72:8E:C4:08:18:F4:A5:17:FA:67:7F
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6305F61555B0C1C1B16C69397FB04BCBC1ADCD5C
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211439.roa
Signing time:             Thu 11 Dec 2025 12:18:08 +0000
ROA not before:           Thu 11 Dec 2025 12:13:08 +0000
ROA not after:            Thu 10 Dec 2026 12:18:08 +0000
asID:                     211439
IP address blocks:        95.135.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 13:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:05:f6:15:55:b0:c1:c1:b1:6c:69:39:7f:b0:4b:cb:c1:ad:cd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Dec 11 12:13:08 2025 GMT
            Not After : Dec 10 12:18:08 2026 GMT
        Subject: CN=C7C312F99D9CF31B55728EC40818F4A517FA677F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:01:b7:3d:22:3c:71:4f:25:71:6a:4f:57:
                    98:9e:d2:db:05:44:60:14:04:74:62:41:67:56:c7:
                    ac:b6:5d:15:32:73:4b:db:c7:5c:42:74:6a:6a:d5:
                    c1:fd:57:62:e9:a9:9c:e3:4e:15:e3:49:39:97:23:
                    e0:e6:f2:09:62:d1:53:0e:d2:09:15:40:8c:d4:e6:
                    14:b4:1a:54:37:8c:90:f3:e3:67:3e:4e:a7:1f:52:
                    a7:b2:7f:f3:e0:4d:e3:55:08:b3:44:1b:31:30:50:
                    8d:e0:40:97:9b:91:70:0e:ac:ef:d3:9a:eb:80:e3:
                    ae:e8:df:eb:8a:48:89:15:c4:38:f2:b6:05:00:72:
                    e3:2c:fb:6e:75:b4:11:a2:c1:96:a4:4b:a7:74:7c:
                    d1:f8:cc:b4:fc:15:21:37:57:fb:25:54:73:d2:2a:
                    2e:4f:97:22:7b:94:ef:1d:28:b1:c8:14:13:cb:3e:
                    c8:92:2f:15:81:79:53:3e:81:40:42:5e:7e:66:e7:
                    38:c3:4d:0b:69:c4:55:15:24:91:df:ae:51:00:63:
                    77:16:50:78:48:50:e4:38:3f:79:f2:51:95:a2:5b:
                    54:85:28:fc:e5:27:0e:99:1e:63:0e:28:41:f9:ef:
                    57:33:88:5d:f2:02:01:23:1f:be:d5:b5:12:e4:a9:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:12:F9:9D:9C:F3:1B:55:72:8E:C4:08:18:F4:A5:17:FA:67:7F
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.135.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:7f:71:6e:02:74:02:f6:84:11:f4:e3:d5:11:1c:fb:f5:0e:
         fc:17:0f:2a:d7:d6:cd:17:41:94:c0:d2:b1:88:9f:84:36:44:
         ec:99:1d:af:1f:dd:aa:61:70:5b:58:5a:8e:1b:b1:67:b0:15:
         86:18:26:02:db:e6:20:a8:e0:73:6d:91:34:7a:3c:ce:13:6c:
         94:e6:3e:a9:d7:90:dc:26:05:65:d0:2a:26:ba:07:ab:5b:3c:
         19:50:fd:17:e0:dc:9b:6a:ca:b9:f2:2e:22:f4:85:7f:17:69:
         1a:bf:11:54:ec:bd:d6:aa:c0:2b:52:29:1a:a0:26:59:6b:a4:
         3f:77:6c:6e:91:d7:d0:ad:6e:a2:05:d2:49:ac:3f:8b:b6:a0:
         99:0c:71:2f:8c:d8:b1:4f:59:8f:d8:43:d9:58:b6:34:0a:e2:
         21:f4:ba:c4:1f:3d:6c:c9:29:15:15:e0:58:f0:54:a6:24:75:
         95:3b:1c:ca:67:35:a1:96:ac:36:6c:39:8b:5f:10:e2:d8:9b:
         21:c9:a8:52:53:3b:e8:35:a1:b4:76:ae:ac:f9:5f:b4:95:af:
         51:bf:32:cc:79:df:f9:b7:60:46:ae:2b:53:48:d8:13:e6:45:
         48:30:8c:c5:9f:8f:2c:b8:9f:fa:2b:71:7d:53:4b:5a:69:a3:
         f6:ea:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:14:18 2025 by rpki-client